Client records, protected to ISO/IEC 27001.
Client records in health and welfare services are among the most sensitive information there is. This page sets out how that information is protected on Mimaso, and what you can expect from us.
HOW IT IS PROTECTED
How client information is protected
Certification, access control and data ownership, in plain terms.
ISO/IEC 27001 certified
Mimaso is certified to ISO/IEC 27001, the international standard for information security management. Certification is independently audited by an accredited third party, so the controls around your clients' information are checked by an external assessor, not just described by us.
A formal ISMS
An Information Security Management System governs how client data is handled, from access and storage to incident response and continuous improvement.
Each worker sees only what their role requires
Access is role-based. Frontline workers, team leaders, administrators and executives each see what their role needs and nothing they should not. Roles and access are configured to your programs during implementation.
Australian privacy obligations
Information handling is aligned to the Privacy Act 1988 (Cth) and the Australian Privacy Principles, so the platform supports the obligations your organisation already has.
Your data stays yours
Client information belongs to your organisation. A full export is available if you ever choose to leave, so you are never locked in.
Indigenous Data Sovereignty
For Aboriginal community-controlled organisations, communities should keep control of their community's data. Your system should support that, and we will work with you on how it applies to your service.
IN THE FIELD
The same access rules apply on the road.
Role-based access does not stop at the office door. On the mobility app, each worker sees only what their role allows, whether they are connected or working offline, and records sync back to the one client record when they are back in range.
- Role-based access on every device
- Works offline, syncs when back in range
- One client record, wherever it is updated
GOOD TO KNOW
This website is separate from the platform
No client or clinical information is collected through, or accessible from, this website. How we handle the details you send us through this site is covered in our Privacy Policy.
DUE DILIGENCE
Security reviews
If your procurement or board process includes a security review, raise it when you book your demo and we will build it into the conversation.
